
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.mft
File: tWQnMiZdQL91ypSp7IEZIRwbmzI.mft (raw, json)
Hash identifier: PBDCUj1WsQD6rRU2fAS0+m27DxgiyPnNDjzfeMW9LM8=
Subject key identifier: 1C:E5:54:13:F3:B2:C2:0A:23:E7:3E:A6:79:E5:AB:28:12:0E:E5:92
Authority key identifier: B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32
Certificate issuer: /CN=A916C128/serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
Certificate serial: 2D1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.mft
Manifest number: 2C67
Signing time: Sun 26 Jul 2026 15:36:12 +0000
Manifest this update: Sun 26 Jul 2026 15:36:11 +0000
Manifest next update: Sun 02 Aug 2026 15:36:11 +0000
Files and hashes: 1: tWQnMiZdQL91ypSp7IEZIRwbmzI.crl (hash: YNsB5SUdAABGxfbqV8VQudZdnaHm32KwAfD1td2FHjA=)
2: zdpO0gyaOty9ncRPEfhtGvEBspY.asa (hash: irL2kj+5b38uZFTIC6OWAZtHNzaWLv9bPTPvqTlgBWs=)
3: 37BAE214429111F18FB6D217B2833773.roa (hash: 8DTZONsJGjymgnSZfnxpolvPLsYSk+tNdQgH6HrBSGI=)
4: E0CC928CABDE11ED954F5C84C4F9AE02.roa (hash: T2ATFndqif2rigzuI4qov++r1+kCWVIg5fV7GxHkRzQ=)
5: 13461F60ABDC11EDAE837666C4F9AE02.roa (hash: ERyde/Gka5P6zXPyNt2BzYHHMs7m9I9h8bcGjPetJdo=)
6: 4462F034F0EC11EB9D0B176AC4F9AE02.roa (hash: A0kKCJ9LwtDmC1YEa/g9xgt0EE37Ohto39y+EtO3rt0=)
7: 8F199E5086EE11F19E006003A7EE528E.roa (hash: ZuAnAgHg5vFTNcsKh5KM85ZI9A4NW/8yy8AIKsgNOsk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.crl
rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 15:36:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11550 (0x2d1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C128, serialNumber=B5642732265D40BF75CA94A9EC8119211C1B9B32
Validity
Not Before: Jul 26 15:36:11 2026 GMT
Not After : Aug 2 15:36:11 2026 GMT
Subject: CN=6a66296c-987b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:51:f6:c8:3a:7f:51:ba:73:63:2f:15:48:57:
8f:8e:ed:a2:98:96:71:9f:d3:17:56:b6:fd:1f:bf:
7b:11:9f:5c:41:d8:fb:1c:32:42:4c:37:b8:08:58:
3f:a3:54:3f:69:1b:11:8f:07:fb:54:f1:2f:57:c1:
47:7c:e9:36:e0:c8:86:46:af:1f:28:5e:93:67:49:
24:0c:83:4e:6d:18:51:6c:25:54:fa:04:63:35:21:
43:38:9e:08:9c:68:6c:7a:6e:40:c1:1b:bd:72:85:
a4:31:05:cb:cf:2e:f1:e8:93:95:9d:02:a5:5e:4e:
cf:e4:c7:fc:99:05:0f:58:e7:67:b9:8a:71:ee:2b:
60:24:3d:e2:b5:d6:d8:90:f8:4a:a0:bc:32:a6:9e:
81:d6:58:63:bb:14:3b:07:53:e6:d7:fb:dc:da:3f:
f8:fd:4a:66:64:a2:4e:61:37:1d:40:22:d8:f3:eb:
3a:e2:a8:dc:cc:e6:b2:89:78:58:e5:3f:9c:ba:37:
1a:65:f9:f5:7b:ff:51:49:62:4d:c9:da:72:39:54:
b9:99:34:8a:46:6f:bf:fa:38:a0:61:dc:6f:6b:b1:
15:08:d3:0e:78:33:63:fa:98:9d:8a:d7:44:10:9c:
80:43:d8:2b:75:fd:10:f7:6e:b1:c6:e4:15:d5:73:
10:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E5:54:13:F3:B2:C2:0A:23:E7:3E:A6:79:E5:AB:28:12:0E:E5:92
X509v3 Authority Key Identifier:
keyid:B5:64:27:32:26:5D:40:BF:75:CA:94:A9:EC:81:19:21:1C:1B:9B:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tWQnMiZdQL91ypSp7IEZIRwbmzI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C128/664A9BCAFA6D11E3B6AC23505911EA32/tWQnMiZdQL91ypSp7IEZIRwbmzI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cb:53:86:11:df:b9:90:64:be:fe:c0:07:31:ac:58:13:5c:8f:
f0:7f:33:7c:08:b1:ce:07:4b:24:81:3f:6b:3d:67:ee:27:40:
83:52:4e:ae:3c:28:fb:6a:0b:38:43:ae:1f:31:f4:e1:de:67:
8f:7a:72:66:e7:c8:b4:61:dc:55:c9:d5:45:76:80:08:2e:60:
aa:29:ac:dc:f1:b7:ce:8b:f3:ae:a1:b5:59:aa:4e:80:62:cc:
f1:f8:8d:3f:28:d6:bc:b8:09:62:09:f2:8a:2e:3c:b4:63:75:
69:12:09:a5:53:26:fa:3c:fb:69:9f:00:6c:eb:6c:11:83:8e:
3b:17:17:3f:cb:60:82:12:84:f1:06:b4:f7:9b:2f:93:62:aa:
1b:f0:9a:76:a1:da:0c:3a:85:e5:2e:f1:2b:8b:4f:11:2e:c1:
f2:f1:43:89:cf:6d:03:1d:39:f1:49:8a:b4:2e:1b:8e:fe:ce:
4c:3f:22:f3:c0:45:7c:03:5e:aa:ee:07:f1:38:98:60:cd:2e:
95:17:f5:c9:76:53:26:f1:7e:4b:f6:76:1f:82:bb:b6:13:8a:
db:fc:6d:02:f3:8d:54:6e:83:4a:69:0c:4a:c0:a8:f4:79:5d:
c1:3b:46:15:7a:55:ed:41:41:bf:9e:34:68:83:92:bc:53:e2:
31:02:39:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:40:20 2026 by rpki-client